A recent security audit of the official Bush and Kerry campaign websites reveals some security holes that could be exploited by hackers:
Both the Bush and the Kerry Web sites have cross-site scripting errors (XSS). These errors can allow a prankster to create fake Web pages which load from the Bush or Kerry Web sites but additional content can be supplied from a different Web server belonging to a prankster. A prankster could then say anything they want on a Bush or Kerry Web page using a XSS error. Examples include fake news stories, slogans telling visitors to vote for the other candidate, and doctored photos of a candidate.Bush v. Kerry: Rating the candidates on Web site security [ComputerBytesMan.com]